Privacy Policy
Last updated: October 14, 2026. Effective: October 14, 2026.
The short version
- We collect what we need to sell you software, deliver licenses and updates, run our free scanners and answer support emails.
- We do not sell or share your personal information for advertising, and we do not use it to profile you.
- We only send marketing email if you ask for it, and you can stop it at any time.
- You can ask to see, correct, export or delete your data by emailing support@forgecovelabs.com.
- Who we are
- What we collect and where it comes from
- Why we use it (legal bases)
- Who we share it with
- Cookies and analytics
- How long we keep it
- Your rights and how to use them
- California residents
- International transfers
- Marketing email and unsubscribing
- Security
- Children
- Changes to this policy
- Contact us
1. Who we are
ForgeCove Labs (“ForgeCove Labs”, “we”, “us”) makes and sells WordPress plugins, including ClearSignal, WP Legal Eagle, WP SaySo and PageLift. ForgeCove Labs is based in Spokane, Washington, USA, and is the controller of the personal information described in this policy.
For the purposes of data protection law (including the EU and UK GDPR), we are the controller of the personal information described in this policy.
- Email: support@forgecovelabs.com
This policy covers forgecovelabs.com, the ForgeCove Access Center at https://access.forgecovelabs.com/, our two free scanners, the PageLift free preview at https://trypagelift.com/, our support email, and the information our plugins send to us. It does not cover what you, as a website owner, collect from your own visitors using our plugins. For that, you are the controller and your own privacy policy applies.
2. What we collect and where it comes from
a) When you buy a product (through WarriorPlus)
Our products are sold through the WarriorPlus marketplace. Payments are processed by WarriorPlus and the payment provider you choose there (for example PayPal or a card processor). We never see or store your full card or bank details. WarriorPlus passes us the information needed to fulfil your order, typically:
- your name and email address;
- what you bought, the price, the date, and the transaction or order ID;
- the status of the order (for example paid, refunded or disputed).
WarriorPlus and the payment providers handle your payment information under their own privacy policies.
b) Your ForgeCove Access Center account
The Access Center is where you get your downloads and license keys. It stores:
- your account email address (and a hashed password or sign-in link records, depending on how you sign in);
- your purchase records and the products you are entitled to;
- your license keys and which sites they are activated on;
- basic security records, such as sign-in times and the IP address used, to protect your account and investigate abuse.
c) When a plugin checks its license or looks for updates
When one of our plugins on a WordPress site checks its license, activates or deactivates, or checks for updates, it contacts the Access Center and sends:
- the license key;
- the site address (URL) where the plugin is installed;
- a random install ID (a code that identifies that installation, not a person);
- the plugin version.
Like any web server, ours also receives the IP address of the server making the request. Our plugins do not send us information about the visitors to your website, your posts, or your customers’ data.
d) ClearSignal AI visibility scanner (scanner.forgecovelabs.com)
When you use the free scanner at https://scanner.forgecovelabs.com/, we collect:
- the website address you ask us to scan, and the public pages and files we fetch from that site to build the report;
- your IP address, which we use only to apply rate limits and prevent abuse. The rate-limit counters are stored under a one-way hashed key and deleted automatically within about two days.
Scan reports are stored so you can view them, then deleted automatically once they are no longer needed. The scanner does not ask for your name or email.
e) WP Legal Eagle website checker (forgecovelabs.com/legaleagle/scanner/)
When you use the free checker at https://forgecovelabs.com/legaleagle/scanner/:
- To run a check, we collect the website address you enter and fetch that site’s public pages. We record the site checked, its score, and a keyed one-way hash of your network address for rate limiting. We do not store your raw IP address.
- To unlock the full report, you give us your name and email address. We store these with the site you checked and its results, and a notification with these details is emailed to the owner of ForgeCove Labs so we can follow up about your report.
- Optional marketing opt-in. There is a “tips and offers” box that is unticked by default. If you tick it, we send you an email asking you to confirm. We only send you marketing email after you click that confirmation link. If you don’t tick it, we will not add you to marketing email.
f) PageLift free preview (trypagelift.com)
When you use the free preview at https://trypagelift.com/:
- You give us your email address. We store it with the time, the kind of preview (HTML file, zip or app link), the app link you entered (if any), a keyed one-way hash of your network address and your browser type, and a notification with these details is emailed to the owner of ForgeCove Labs. We use this to run the preview and prevent misuse.
- The preview runs a temporary WordPress inside your own browser (WordPress Playground, loaded from playground.wordpress.net, a service of the WordPress project). An HTML file or zip you choose stays in your browser and is not sent to us. Closing the tab ends the preview.
- If you enter a link to a published app, our server fetches that app’s public pages and files to build your preview. They pass through and are not kept.
- Optional marketing opt-in. There is a “tips and offers” box that is unticked by default. If you don’t tick it, we will not send you marketing email, and your preview record is deleted automatically after 90 days.
g) Support emails
When you email us, we receive your email address, name (if included), and whatever you choose to send: messages, screenshots, site addresses, error messages, and order details. Please don’t send passwords, API keys or other people’s personal data unless we specifically need it to help you.
h) Our website
When you visit forgecovelabs.com, our hosting and security providers automatically receive standard technical information (IP address, browser type, pages requested, date and time) in server logs. We use these logs to keep the site running and secure. See Cookies and analytics below.
What we do not collect
We do not knowingly collect sensitive data (such as health, religion or biometric data), and we do not buy personal information from data brokers.
3. Why we use it (and our legal bases)
If you are in the EU, the UK or another place with similar laws, we must have a legal basis for using your personal information. Ours are:
| What we do | Legal basis |
|---|---|
| Deliver your purchase, create your Access Center account, issue and validate license keys, provide downloads and updates | Performance of a contract with you |
| Answer support requests and handle refunds | Performance of a contract; our legitimate interest in helping people who contact us |
| Run the free scanners and the PageLift free preview, and produce your report or preview | Our legitimate interest in providing a free tool you have asked to use (and steps you request before buying) |
| Send marketing email (tips and offers) | Your consent, which you can withdraw at any time |
| Rate limiting, fraud prevention, preventing license misuse, keeping our systems secure | Our legitimate interest in protecting our services and customers |
| Keep sales and tax records; respond to legal requests; handle chargebacks and disputes | Legal obligation; our legitimate interest in establishing or defending legal claims |
Where we rely on legitimate interests, we have considered your rights and expectations, and we keep the data we use to a minimum. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who we share it with
We do not sell your personal information. We share it only with service providers that help us run the business, and only what they need:
- WarriorPlus, which runs the marketplace and checkout as an independent business under its own privacy policy, processes orders and refunds, and may share your name and email with the affiliate who referred you (if any);
- Payment processors used through WarriorPlus (for example PayPal or card processors);
- Our hosting provider, which hosts our website, the Access Center and the scanners;
- Our email provider(s), which deliver support email, order and license emails, and, if you opted in, marketing email;
- where used, security or content-delivery providers acting on our behalf.
We may also disclose information if the law requires it, to protect our rights or the safety of others, or to a buyer if the business is ever sold (in which case this policy would continue to apply to your information).
5. Cookies and analytics
Most cookies and similar storage on our pages are strictly necessary, for example to keep you signed in to the Access Center, protect forms against abuse, and remember choices you make on the page. One exception: our sales pages load a script from WarriorPlus that sets cookies to credit the affiliate who referred you. These are not strictly necessary. See our Cookie Policy for details and how to block them.
We do not use analytics cookies. If we ever add analytics or any other non-essential cookies, we will name the tool here and ask for your consent first where the law requires it. We do not use advertising cookies.
Our product sales pages load a script from WarriorPlus, the marketplace that sells our products. It sets cookies so your order and the affiliate who referred you are credited correctly. WarriorPlus checkout pages are run by WarriorPlus and use their own cookies under their own policy. Our Cookie Policy lists every cookie.
6. How long we keep it
We keep personal information only for as long as we need it. These are our default periods:
| Information | How long |
|---|---|
| Purchase and order records | As long as your account exists, and then as long as tax and accounting law requires (typically up to 7 years) |
| Access Center account, license keys and activation records | While your account or license is active, then up to 2 years after your last purchase or activity, unless you ask us to delete it sooner (some order records must be kept as above) |
| License and update check records | Up to 12 months |
| ClearSignal scanner reports | Only as long as needed to show you the report; rate-limit counters about 2 days |
| Legal Eagle checker records and leads (name, email, site checked, results) | Deleted automatically after 2 years (730 days), or sooner if you ask |
| PageLift free preview sign-ups (email, time, preview type, app link) | Deleted automatically after 90 days if you did not opt in to tips and offers (if you did, see Marketing email list), or sooner if you ask |
| Marketing email list | Until you unsubscribe or ask us to delete you (we keep a record of the unsubscribe so we don’t email you again) |
| Support emails | Up to 3 years after the conversation ends |
| Server and security logs | Up to 90 days, unless needed to investigate abuse |
We may keep information longer if we need it to resolve a dispute, enforce our terms, or comply with the law.
7. Your rights and how to use them
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy;
- correct information that is wrong or incomplete;
- delete your information;
- object to our use of it based on legitimate interests, and to direct marketing at any time;
- restrict how we use it in some cases;
- data portability: receive the information you gave us in a common, machine-readable format;
- withdraw consent at any time, where we rely on consent (this doesn’t affect what we did before);
- complain to a data protection supervisory authority, for example the authority in the EU country where you live or work, or the UK Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to sort out your concern first.
How to make a request: email support@forgecovelabs.com with the subject “Privacy request”, tell us what you’d like, and include the email address you used with us. We may need to confirm it is really you, usually by replying from that address. We will respond within one month (or 45 days for California requests), and we won’t charge you or treat you differently for using your rights. You may use an authorized agent; we may ask for proof that they are authorized.
Deleting your Access Center account means we can no longer provide your downloads, license keys or updates. We may keep order records we are legally required to keep.
8. California residents (CCPA/CPRA)
In the last 12 months we have collected these categories of personal information, from the sources and for the purposes described above: identifiers (name, email address, IP address, install ID, license key); commercial information (products bought, order history); internet or network activity (license checks, server logs, scanner use); and the contents of messages you send us. We do not collect sensitive personal information for the purpose of inferring characteristics about you.
We do not sell or share personal information, as “sell” and “share” are defined in California law, and we have not done so in the last 12 months. We do not use or disclose sensitive personal information. We do not knowingly sell or share the personal information of anyone under 16.
California residents have the rights to know, access, correct and delete their personal information, and not to be discriminated against for using these rights. See section 7 for how to make a request.
9. International transfers
We are based in the United States and our service providers may store and process information in the United States and other countries. If you are in the EU, UK or Switzerland, this means your personal information is transferred outside your country. When we do this, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK addendum), or the provider’s certification under the EU-US Data Privacy Framework and its UK and Swiss extensions, where available. You can ask us for more information about these safeguards.
10. Marketing email and unsubscribing
We send marketing email only to people who opted in (for example by ticking the unticked “tips and offers” box and confirming by email). Every marketing email includes an unsubscribe link and our postal address. You can also unsubscribe by replying “unsubscribe” or emailing support@forgecovelabs.com. We will act on your request promptly, and in any case within 10 business days.
Even after you unsubscribe, we may still send you messages about your purchases, licenses, security or account (these are not marketing).
11. Security
We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls, hashed passwords, keeping scanner data stores out of public web folders, and hashing IP addresses where we only need them for rate limiting. No method of storage or transmission is completely secure, so we can’t guarantee absolute security. If a breach affects your personal information, we will notify you and the authorities where the law requires.
12. Children
Our products and services are for businesses and adults. They are not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
13. Changes to this policy
We may update this policy when our products, providers or the law change. We will change the “Last updated” date at the top, and if a change is significant we will tell customers by email or with a notice in the Access Center before it takes effect.
14. Contact us
Questions or requests about privacy:
- Email: support@forgecovelabs.com
See also our Terms of Service and Refund Policy.